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ART-UNIT: 271 

PRIMARY-EXAMINER: Alam; Hosain T. 
ATTY-AGENT-FIRM: Bryan Cave LLP 

ABSTRACT : 

A system for capturing, developing and profiling an individual's interests in 
various sites, exhibits or items on display at an institution or facility and 
providing site- and/or theme-specific information based on these interests. The 
system preferably includes a collection of information associated with the sites, 
exhibits or items on display at an institution or- facility, which is organized and 
is capable of being indexed by each particular site, exhibit or item location or 
item on display. The preferred system further includes a plurality of portable 
information storage devices, such as, for example, smart cards having non-volatile 



http://westbrs:9000/bin/gate.exe?f=doc&state=v7o7qd4.2&ESNAME=FRO&p_Message=& 3/3/04 



memory cable of being organized into a specialized data structure, uniquely 
assigned to visitors to such institutions or facilities. The data structure on the 
portable information storage device contains various fields including those 
designed to store biographical information about the visitor and an interest 
profile comprised of indexes relating to the sites, exhibits or items on display at 
such institutions or facilities identified and selected by the visitor. The system 
further includes means for allowing the visitor to select a particular site, 
exhibit or item of interest and for recording an index relating to the selection in 
the interest profile on the portable information storage device assigned to that 
particular visitor. Preferably, the system further includes means, such as, for 
example, an informational kiosk, for reading the stored indexes from, the portable 
information storage devices and for retrieving the collected exhibit information 
related to those indexes stored on the portable information storage device by the 
visitor . 

39 Claims, 8 Drawing figures 



http://westbrs:9000/bin/gate.exe?f=doc&state=v7o7qd4.2&ESNAME=FRO&p_Message=& 3/3/04 



First Hit Fwd Refs 
End of Result Set 




L5: Entry 1 of 1 File: USPT Aug 12, 2003 

DOCUMENT-IDENTIFIER: US 6606744 Bl 

TITLE: Providing collaborative installation management in a network-based supply 
chain environment 

Detailed Description Text (355) : 

Physically, the Internet is a huge, global network spanning over 92 countries and 
comprising 59,000 academic, commercial, government, and military networks, 
according to the Government Accounting Office (GAO) , with these numbers expected to 
double each year. Furthermore, there are about 10 million host computers, 50 
million users, and 76,000 World-Wide Web servers connected to the Internet. The 
backbone of the Internet consists of a series of high-speed communication links 
between major supercomputer sites and educational and research institutions within 
the U.S. and throughout the world. 

Detailed Description Text (470) : 

The Internet is a method of interconnecting physical networks and a set of 
conventions for using networks that allow the computers they reach to interact. 
Physically, the Internet is a huge, global network spanning over 92 countries and 
comprising 59,000 academic, commercial, government, and military networks, 
according to the Government Accounting Office (GAO), with these numbers expected to 
double each year. Furthermore, there are about 10 million host computers, 50 
million users, . and 76,000 World-Wide Web servers connected to the Internet. The 
backbone of the Internet consists of a series of high-speed communication links 
between major supercomputer sites and educational and research institutions within 
the U.S. and throughout the world. 

Detailed Description Text (1172): 

Such aggregation, in the preferred embodiment of the present invention, may involve 
preserving at least a portion of the control information (e.g., executable code 
such as load modules) for each of various of said portions by, for example, 
embedding some or all of such portions individually as WAF content container 
objects within an overall WAF content container and/or embedding some or all of 
such portions directly into a WAF content container. In the latter case, content 
control information of said content container may apply differing control 
information sets to various of such portions based upon said portions original 
control information requirements before aggregation. Each of such embedded WAF 
content containers may have its own control information in the form of one or more 
permissions records. Alternatively, a negotiation between control information 
associated with various aggregated portions of electronic content, may produce a 
control information set that would govern some or all of the aggregated content 
portions. The WAF content control information produced by the negotiation may be 
uniform (such as having the same load modules and/or component assemblies, and/or 
it may apply differing such content control information to two or more portions 
that constitute an aggregation of WAF controlled content such as differing 
metering, budgeting, billing and/or payment models. For example, content usage 
payment may be automatically made, either through a clearinghouse, or directly, to 
different content providers for different potions, enable flexible metering of, or 
other collection of information related to, use of electronic content and/or 
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electronic appliances. A feature of the present invention enables such flexibility 
of metering control mechanisms to accommodate a simultaneous, broad array of: (a) 
different parameters related to electronic information content use; (b) different 
increment units (bytes, documents, properties, paragraphs, images, etc.) and/or 
other organizations of such electronic content; and/or (c) different categories of 
user and/or WAF installation types, such as client organizations, departments, 
projects, networks, and/or individual users, etc. This feature of the present 
invention can be employed for content security, usage analysis (for example, market 
surveying), and/or compensation based upon the use and/or exposure to WAF managed 
content. Such metering is a flexible basis for ensuring payment for content 
royalties, licensing, purchasing, and/or advertising. A feature of the present 
invention provides for payment means supporting flexible electronic currency and 
credit mechanisms, including the ability to securely maintain audit trails 
reflecting information related to use of such currency or credit. WAF supports 
multiple differing hierarchies of client organization control information wherein 
an organization client administrator distributes control information specifying the 
usage rights of departments, users, and/or projects. Likewise, a department 
(division) network manager can function as a distributor (budgets, access rights, 
etc.) for department networks, projects, and/or users, etc. provide scalable, 
integratable, standardized control means for use on electronic appliances ranging 
from inexpensive consumer (for example, television set-top appliances) and 
professional devices (and hand-held PDAS) to servers, mainframes, communication 
switches, etc. The scalable transaction management/auditing technology of the 
present invention will result in more efficient and reliable interoperability 
amongst devices functioning in electronic commerce and/or data security 
environments. As standardized physical containers have become essential to the 
shipping of physical goods around the world, allowing these physical containers to 
universally "fit" unloading equipment, efficiently use truck and train space, and 
accommodate known arrays of objects (for example, boxes) in an efficient manner, so 
WAF electronic content containers may, as provided by the present invention, be 
able to efficiently move electronic information content (such as commercially 
published properties, electronic currency and credit, and content audit 
information), and associated content control information, around the world. 
Interoperability is fundamental to efficient electronic commerce. The design of the 
WAF foundation, WAF load modules, and WAF containers, are important features that 
enable the WAF node operating environment to be compatible with a very broad range 
of electronic appliances. The ability, for example, for control methods based on 
load modules to execute in very "small" and inexpensive secure sub-system 
environments, such as environments with very little read/write memory, while also 
being able to execute in large memory sub-systems that may be used in more 
expensive electronic appliances, supports consistency across many machines. This 
consistent WAF operating environment, including its control structures and 
container architecture, enables the use of standardized WAF content containers 
cross a broad range of device types and host operating environments. Since WAF 
capabilities can be seamlessly integrated as extensions, additions, and/or 
modifications to fundamental capabilities of electronic appliances and host 
operating systems, WAF containers, content control information, and the WAF 
foundation will be able to work with many device types and these device types will 
be able to consistently and efficiently interpret and enforce WAF control 
information. Through this integration users can also benefit from a transparent 
interaction with many of the capabilities of WAF. WAF integration with software 
operating on a host electronic appliance supports a variety of capabilities that 
would be unavailable or less secure without such integration. Through integration 
with one or more device applications and/or device operating environments, many 
capabilities of the present invention can be presented as inherent capabilities of 
a given electronic appliance, operating system, or appliance application. For 
example, features of the present invention include: (a) WAF system software to in 
part extend and/or modify host operating systems such that they possesses WAF 
capabilities, such as enabling secure transaction processing and electronic 
information storage; (b) one or more application programs that in part represent 
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tools associated with WAF operation; and/or (c) code to be integrated into 
application programs, wherein such code incorporates references into WAF system 
software to integrate WAF capabilities and makes such applications WAF aware (for 
example, word processors, database retrieval applications, spreadsheets, multimedia 
presentation authoring tools, film editing software, music editing software such as 
MIDI applications and the like, robotics control systems such as those associated 
with CAD/CAM environments and NCM software and the like, electronic mail systems, 
teleconferencing software, and other data authoring, creating, handling, and/or 
usage applications including combinations of the above) . These one or more features 
(which may also be implemented in firmware or hardware) may be employed in 
conjunction with a WAF node secure hardware processing capability, such as a 
microcontroller (s) , microprocessor ( s) , other CPU(s) or other digital processing 
logic, employ audit reconciliation and usage pattern evaluation processes that 
assess, through certain, normally network based, transaction processing 
reconciliation and threshold checking activities, whether certain violations of 
security of a WAF arrangement have occurred. These processes are performed remote 
to WAF controlled content end-user WAF locations by assessing, for example, 
purchases, and/or requests, for electronic properties by a given WAF installation. 
Applications for such reconciliation activities include assessing whether the 
quantity of remotely delivered WAF controlled content corresponds to the amount of 
financial credit and/or electronic currency employed for the use of such content. A 
trusted organization can acquire information from content providers concerning the 
cost for content provided to a given WAF installation and/or user and compare this 
cost for content with the credit and/or electronic currency disbursements for that 
installation and/or user. Inconsistencies in the amount of content delivered versus 
the amount of disbursement can prove, and/or indicate, depending on the 
circumstances, whether the local WAF installation has been, at least to some 
degree, compromised (for example, certain important system security functions, such 
as breaking encryption for at least some portion of the secure subsystem and/or WAF 
controlled content by uncovering one or more keys) . Determining whether irregular 
patterns (e.g. unusually high demand) of content usage, or requests for delivery of 
certain kinds of WAF controlled information during a certain time period by one or 
more WAF installations and/or users (including, for example, groups of related 
users whose aggregate pattern of usage is suspicious) may also be useful in 
determining whether security at such one or more installations, and/or by such one 
or more users, has been compromised, particularly when used in combination with an 
assessment of electronic credit and/or currency provided to one or more WAF users 
and/or installations, by some or all of their credit and/or currency suppliers, 
compared with the disbursements made by such users and/or installations, support 
security techniques that materially increase the time required to "break" a 
system's integrity. This includes using a collection of techniques that minimizes 
the damage resulting from comprising some aspect of the security features of the 
present inventions, provide a family of authoring, administrative, reporting, 
payment, and billing tool user applications that comprise components of the present 
invention's trusted/secure, universe wide, distributed transaction control and 
administration system. These components support WAF related: object creation 
(including placing control information on content), secure object distribution and 
management (including distribution control information, financial related, and 
other usage analysis), client internal WAF activities administration and control, 
security management, user interfaces, payment disbursement, and clearinghouse 
related functions. These components are designed to support highly secure, uniform, 
consistent, and standardized: electronic commerce and/or data security pathway (s) 
of handling, reporting, and/or payment; content control and administration; and 
hximan factors (e.g. user interfaces), support the operation of a plurality of 
clearinghouses, including, for example, both financial and user clearinghouse 
activities, such as those performed by a client administrator in a large 
organization to assist in the organization's use of a WAF arrangement, including 
usage information analysis, and control of WAF activities by individuals and groups 
of employees such as specifying budgets and the character of usage rights available 
under WAF for certain groups of and/or individual, client personnel, subject to 



http://westbrs:9000/bin/gate.exe?f=doc&state=v7o7qd.9.1&ESNAME=KW 3/3/04 



control information series to control information submitted by the client 
administrator. At a clearinghouse, one or more WAF installations may operate 
together with a trusted distributed database environment (which may include 
concurrent database processing means) . A financial clearinghouse normally receives 
at its location securely delivered content usage information, and user requests 
(such as requests for further credit, electronic currency, and/or higher credit 
limit) . Reporting of usage information and user requests can be used for supporting 
electronic currency, billing, payment and credit related activities, and/or for 
user profile analysis and/or broader market survey analysis and marketing 
(consolidated) list generation or other information derived, at least in part, from 
said usage information, this inform.ation can be provided to content providers or 
other parties, through secure, authenticated encrypted communication to the WAF 
installation secure subsystems. Clearinghouse processing means would normally be 
connected to specialized I/O means, which may include high speed telecommunication 
switching means that may be used for secure communications between a clearinghouse 
and other WAF pathway participants, securely support electronic currency and credit 
usage control, storage, and communication at, and between, WAF installations. WAF 
further supports automated passing of electronic currency and/or credit 
information, including payment tokens (such as in the form of electronic currency 
or credit) or other payment information, through a pathway of payment, which said 
pathway may or may not be the same as a pathway for content usage information 
reporting. Such payment may be placed into a WAF container created automatically by 
a WAF installation in response to control information stipulating the "withdrawal" 
of credit or electronic currency from an electronic credit or currency account 
based upon an amount owed resulting from usage of WAF controlled electronic content 
and/or appliances. Payment credit or currency may then be automatically 
communicated in protected (at least in part encrypted) form through 
telecommunication of a WAF container to an appropriate party such as a 
clearinghouse, provider of original property content or appliance, or an agent for 
such provider (other than a clearinghouse) . Payment information may be packaged in 
said WAF content container with, or without, related content usage information, 
such as metering information. An aspect of the present invention further enables 
certain information regarding currency use to be specified as unavailable to 
certain, some, or all WAF parties ("conditionally" to fully anonymous currency) 
and/or further can regulate certain content information, such as currency and/or 
credit use related information (and/or other electronic information usage data) to 
be available only under certain strict circumstances, such as a court order (which 
may itself require authorization through the use of a court controlled WAF 
installation that may be required to securely access "conditionally" anonymous 
information) . Currency and credit information, under the preferred embodiment of 
the present invention, is treated as administrative content; support fingerprinting 
(also known as watermarking) for embedding in content such that when content 
protected under the present invention is released in clear form from a WAF object 
(displayed, printed, communicated, extracted, and/or saved) , information 
representing the identification of the user and/or WAF installation responsible for 
transforming the content into clear form is embedded into the released content. 
Fingerprinting is useful in providing an ability to identify who extracted 
information in clear form a WAF container, or who made a copy of a WAF object or a 
portion of its contents. Since the identity of the user and/or other identifying 
information may be embedded in an obscure or generally concealed manner, in WAF 
container content and/or control information, potential copyright violators may be 
deterred from unauthorized extraction or copying. Fingerprinting normally is 
embedded into unencrypted electronic content or control information, though it can 
be embedded into encrypted content and later placed in unencrypted content in a 
secure WAF installation sub-system as the encrypted content carrying the 
fingerprinting information is decrypted. Electronic information, such as the 
content of a WAF container, may be fingerprinted as it leaves a network (such as 
Internet) location bound for a receiving party. Such repository information may be 
maintained in unencrypted form prior to communication and be encrypted as it leaves 
the repository. Fingerprinting would preferably take place as the content leaves 
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the repository, but before the encryption step. Encrypted repository content can be 
decrypted, for example in a secure WAF sub-system, fingerprint information can be 
inserted, and then the content can be re-encrypted for transmission. Embedding 
identification information of the intended recipient user and/or WAF installation 
into content as it leaves, for example, an Internet repository, would provide 
important information that would identify or assist in identifying any party that 
managed to compromise the security of a WAF installation or the delivered content. 
If a party produces an authorized clear form copy of WAF controlled content, 
including making unauthorized copies of an authorized clear form copy, fingerprint 
information would point back to that individual and/or his or her WAF installation. 
Such hidden information v/ill act as a strong disincentive that should dissuade a 
substantial portion of potential content "pirates" from stealing other parties 
electronic information. Fingerprint information identifying a receiving party 
and/or WAF installation can be embedded into a WAF object before, or during, 
decryption, replication, or communication of WAF content objects to receivers. 
Fingerprinting electronic content before it is encrypted for transfer to a customer 
or other user provides information that can be very useful for identifying who 
received certain content which may have then been distributed or made available in 
unencrypted form. This information would be useful in tracking who may have 
"broken" the security of a WAF installation and was 

Detailed Description Text (1192): 

This implies that all new applications should ideally be based on a Netcentric 
Architecture, rather than on a traditional client /server or a host-based 
architecture. 

Detailed Description Text (1198) : 

The following sections identify the main characteristics associated with a 
Netcentric, Client Server or Host based technology generation. This list should in 
no way be considered complete and exhaustive but is included as a starting point 
from which the identification process may begin. 

Detailed Description Text (1202): 

Existing Architecture and Infrastructure 8700 El. Other Netcentric applications 
been developed and placed in production. The user community is often less resistant 
to accept the use of new technology to address changing business drivers if they 
are not completely unfamiliar with the characteristics of the technology. If an 
application based on a Netcentric architecture has already been successfully 
piloted or deployed, acceptance of additional systems will be eased. E2 . The client 
has significant technology skills within its IT department. This is especially 
important if the client plans on developing or operating the application 
themselves. A significant investment in training and changes to internal 
organizations may be necessary for successful deployment of this type of system. 
The client must have a culture that supports change. Some organizations are very 
conservative and strong, making it difficult to deliver a successful project using 
new technology. E3. The client has multiple hardware/operating system 
configurations for their client machines. In traditional client /server 
environments, distributing an application internally or externally for an 
enterprise requires that the application be ported, recompiled and tested for all 
specific workstation operating systems. Use of a Universal Client or web-browser 
may eliminate many of these problems by providing a consistent and familiar user 
interface on many different operating systems and hardware platforms. E4. The 
application will run on a device other than a PC. The momentum of the Internet is 
putting a lot of pressure on vendors of various devices to be web-enabled. Having 
the Internet infrastructure in place makes it more feasible for vendors to create 
new physical devices from which electronic information can be accessed. For 
example, Web televisions are gaining momentum. Now users can access the Internet 
from a television set. Network Computers, thin-client devices that download and run 
applications from a centrally maintained server are generating a lot of interest. 
Also, users want to have access to the same information from multiple physical 
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devices. For example, a user might want to have access to his/her e-mail from a 
cellular phone, from a Web TV or their portable PC. E5. The current legacy systems 
can scale to serve a potentially large new audience. Expanding the user community 
of a legacy host or client /server system by including an audience which is external 
to the company can result in dramatic increases in system usage. The additional 
demand and increased usage placed on existing legacy systems is often difficult to 
estimate or predict. Analysis must be conducted to ensure existing legacy systems 
and infrastructure can absorb this increase. 

Detailed Description Text (1224) : 

DAF provides access to a thought process regarding leadership and architecture 
frameworks for Execution, Development and Operations environments. Very briefly, 
DAF covers: The Core Execution Architecture frameworks for the different 
architecture generations ( Host, Client /Server and Netcentric) . Most users will 
primarily use the Netcentric framework. The Execution Architecture Extensions. This 
is a collection of common delivery vehicles. These frameworks extend the core 
frameworks with services specific for a particular delivery vehicle. The 
Development Architecture Framework should help with the establishment and operation 
of a high-quality development environment. The Operations Architecture Framework 
should help with the establishment and operation of a high-quality operations 
environment . 

Detailed Description Text (1270) : 

Peer-to-peer computing allows work stations to concurrently send and host multiple 
requests for services. Security, reliability and integrity issues need to be 
explored, especially because the market has high expectations for these areas in 
client /server environments. Asynchronous distributed computing is best handled with 
mobile agents. Rather than coding a long-lasting, complex exchange of messages 
between a client and possibly multiple servers, a mobile agent carries a compact 
program with all the required procedures for the interaction to be executed 
remotely. 
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